v0.23.0 Breaking change: New provider
This release introduces a minor breaking change. It now requires the cloudposse/awsutils
provider, which in turn requires a region
argument to set the AWS region to work in, just like the Hashicorp AWS provider does. So, if you currently have this:
provider "aws" {
region = var.region
}
you should update it to this:
provider "aws" {
region = var.region
}
provider "awsutils" {
region = var.region
}
and you should also update terraform.required_providers
to include
awsutils = {
source = "cloudposse/awsutils"
version = ">= 0.11.0"
}
add expiring iam_access_key @mcalhoun (#58)
what
- By default, when the
create_iam_access_key
variable istrue
, create an IAM Access Key that will expire after 30 days. - After the
iam_access_key_max_age
have elapsed, runningterraform plan
andterraform apply
again will produce a new secret access key.
why
- Security best practices dictate that you should rotate your password/credentials on a periodic basis